Mass Delete Customers

Endpoint	Method
/api/admin/customers/mass-delete	POST

Body: { "indices": int[] }. Per-id active-orders guard skips with a reason rather than aborting. Permission: customers.customers.delete.